Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

RADIUS Authentication-Type

This thread has been viewed 4 times
  • 1.  RADIUS Authentication-Type

    Posted Feb 17, 2014 12:50 PM

    After upgrading my controller to 6.3.1.1 the RADIUS Authentication-Type isn't sent to the RADIUS Server anymore. Therefore the authentication fails. When testing the authentication in the Diagnostics Tab everything is working fine.

    Are there any known issues?

     

    Kind regards



  • 2.  RE: RADIUS Authentication-Type

    EMPLOYEE
    Posted Feb 17, 2014 12:55 PM

    Please send us a screenshot so that we know exactly the parameter you are referring to on the Radius Server Message.



  • 3.  RE: RADIUS Authentication-Type

    Posted Feb 18, 2014 03:03 AM
      |   view attached

    In the attached file the parameter Authentication-Type. In this example it is PAP but since the upgrade this string is empty "". So Authenticaton-Type=

    This is only missing for the administrative logins via the Web-Interface or over SSH. WLAN works find.

     

    Kind regards



  • 4.  RE: RADIUS Authentication-Type

    EMPLOYEE
    Posted Feb 18, 2014 06:00 AM

    In the Controller under Configuration> Administration, check to make sure that the administrative login type is PAP.  You can do that And/Or key off of the NAS-PORT-TYPE of Virtual to know that this is an administrative login.  6.2 and 6.3 brought the capability that MsChap can be used to Administrative login, instead of just PAP.  

     

    EDIT:

     

    You should always key off of the nas-port-type = Virtual, because Captive Portal logins also use PAP as an  authentication type.



  • 5.  RE: RADIUS Authentication-Type

    Posted Feb 18, 2014 08:53 AM

    Indeed I want to use MSCHAPv2 for the administrative login. Also the setting to use MSCHAPv2 is set. But the RADIUS request is sent without the Administrative-Type=MSCHAPv2.